Privacy Policy

This Privacy Policy sets out the basis on which personal data collected from you, or provided by you, will be processed by www.neatplanterco.com. We are committed to protecting your privacy and fulfilling our legal obligations regarding data protection under the General Data Protection Regulation (GDPR) and applicable German data protection laws.

1. Data Controller Information
   For the purposes of the General Data Protection Regulation (GDPR) and relevant national data protection legislation, the Data Controller responsible for your personal data is:

Data Controller: www.neatplanterco.com

Operating Address: Dorfstraße 26, 24616 Hasenkrug

Email Contact: control@neatplanterco.com

Telephone Contact: +49 15236974934

2. Information We Collect
   We collect and process personal data necessary for the fulfillment of contractual obligations, customer inquiries, and the operation of our online shop. This includes:

Identity & Contact Data: Name, billing address, delivery address, email address, and telephone number.

Transaction Data: Details regarding products purchased, order values, and fulfillment logs.

Technical & Usage Data: IP address, browser type, operating system, and information regarding your interaction with our website.

The legal basis for processing this data is Article 6(1)(b) of the GDPR (necessary for the performance of a contract) and Article 6(1)(f) of the GDPR (legitimate interests in providing a functional online service).

3. Payment Processing
   To execute transactions on www.neatplanterco.com, payment processing services are provided by our external payment processing partner:

Payment Processor: Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland)

When you make a purchase, payment information (such as credit or debit card details) is transmitted directly to and processed by Stripe in an encrypted manner. We do not collect, process, or store full payment card details on our servers. The transmission of data to Stripe is carried out pursuant to Article 6(1)(b) GDPR for contract fulfillment. For detailed information on how Stripe handles personal data, please refer to the Stripe Privacy Policy.

4. Data Retention Period
   Personal data processed by www.neatplanterco.com is retained only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable German and European statutory retention periods.

Commercial & Tax Retention: Under German commercial and fiscal law (specifically the German Commercial Code / HGB and Fiscal Code / AO), order records, invoices, and accounting data must be retained for up to 10 years.

General Correspondence: Standard customer communications and inquiry logs are retained for up to 3 years in alignment with statutory limitation periods under the German Civil Code (BGB).

Upon the expiry of the applicable statutory retention periods, the corresponding personal data is routinely erased or anonymised, provided that it is no longer required for contract execution or legitimate legal purposes.

5. Data Sharing and Third Parties
   We do not sell, trade, or otherwise transfer your personal data to unauthorized third parties. Personal data is disclosed only to essential service partners required for fulfilling orders and executing business operations, specifically:

Order dispatch and shipping service providers.

Payment processing services (Stripe).

Technical web hosting providers operating within the European Economic Area (EEA).

All third-party service providers are legally obligated to process personal data strictly in compliance with GDPR standards.

6. Your Legal Rights Under GDPR
   Under the General Data Protection Regulation, European residents possess the following rights regarding their personal data:

Right of Access (Article 15 GDPR): Request confirmation as to whether your personal data is being processed and obtain a copy of such data.

Right to Rectification (Article 16 GDPR): Request the correction of inaccurate or incomplete personal data.

Right to Erasure / “Right to be Forgotten” (Article 17 GDPR): Request the deletion of personal data, subject to legal record-keeping obligations.

Right to Restriction of Processing (Article 18 GDPR): Request the restriction of processing under specific legal conditions.

Right to Data Portability (Article 20 GDPR): Receive personal data in a structured, commonly used, and machine-readable format.

Right to Object (Article 21 GDPR): Object to data processing based on legitimate interests.

To exercise any of these rights, please contact the Data Controller via email at control@neatplanterco.com. You also retain the statutory right to lodge a complaint with a competent supervisory authority for data protection in Germany.

communications over the internet can carry inherent risks; while we implement standard industry protections, no digital system can be described as entirely risk-free.